content-repurposing

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill's setup depends on a remote repository, npx skills add belt-sh/cli (line 7), and an install-instructions file at a raw GitHub URL (line 15), both within the inference-sh vendor ecosystem, but the belt-sh publisher is only inferred from the skill's own branding rather than independently established, so this is an unofficial-tier dependency.